CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.14)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
ROUTERmate has a default SNMP community name which allows remote attackers to modify its configuration.
The Cisco PIX firewall manager (PFM) on Windows NT allows attackers to connect to port 8080 on the PFM server and retrieve any file whose name and location is known.
The AnswerBook2 (AB2) web server dwhttpd 3.1a4 allows remote attackers to cause a denial of service (resource exhaustion) via an HTTP POST request with a large content-length.
IP fragmentation attack on Cisco PIX firewall and CBAC results in denial of service.
Opera 3.2.1 allows remote attackers to cause an application crash via a URL that contains an extra / in the http:// tag.
The WINS server in Microsoft Windows NT 4.0 before SP4 is vulnerable to an attack that can lead to denial of service by sending invalid UDP frames to port 137. Attackers can exploit this vulnerability by flooding the server with random packets.
Netscape Enterprise servers may expose files through the PageServices query.
Vulnerability in Predictive on HP-UX 11.0 and earlier, and MPE/iX 5.5 and earlier, allows attackers to compromise data transfer for Predictive messages (using e-mail or modem) between customer and Response Center Predictive systems.
Eudora and Eudora Light before version 3.05 allow remote attackers to cause a crash and corrupt the user's mailbox via an e-mail message with certain dates, such as dates before 1970 or dates that are 100 years after the current date.
Internet Explorer 4.0 allows remote attackers to cause a denial of service (crash) via HTML code that contains a long CLASSID parameter in an OBJECT tag.
Buffer overflow in the ping CGI program in Xylogics Annex terminal service allows remote attackers to cause a denial of service via a long query parameter.
NBase switches NH208 and NH215 run a TFTP server which allows remote attackers to send software updates to modify the switch or cause a denial of service (crash) by guessing the target filenames, which have default names.
Vintra SMTP MailServer allows remote attackers to cause a denial of service via a malformed 'EXPN *@' command.
The vulnerability in Solaris SUNWadmap allows for root access.
Buffer overflow in CSM Proxy 4.1 allows remote attackers to cause a denial of service (crash) via a long string to the FTP port.
KMail in KDE 1.0 provides a PGP passphrase as a command line argument to other programs, which could allow local users to obtain the passphrase and compromise the PGP keys of other users.
StarTech's POP3 proxy server and telnet server allow remote attackers to cause a denial of service via a long USER command.
CVE-1999-0494 is a denial of service vulnerability in the WinGate proxy due to a buffer overflow in the POP3 protocol.
CVE-1999-0007 vulnerability allows information to be extracted from SSL-encrypted sessions using PKCS #1. This could lead to the disclosure of sensitive data transmitted in these sessions.
FreeBSD allows local users to conduct a denial of service by creating a hard link from a device special file to a file on an NFS file system.